mindsdb kayıtları

mindsdb üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %72,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
42Planlayın	CVE-2025-68472Kavram kanıtı	MindsDB has improper sanitation of filepath that leads to information disclosure and DOSmindsdb · mindsdb · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,1	—	%20,3	12 Oca 2026
38İzleyin	CVE-2026-27483Kavram kanıtı	MindsDB has Path Traversal in /api/files Leading to Remote Code Executionmindsdb · mindsdb · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%8,8	24 Şub 2026
37İzleyin	CVE-2024-24759Kavram kanıtı	MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebindingmindsdb · mindsdb · CWE-918 Kimlik doğrulamasız SSRF	Kritik9,1	—	%4,9	5 Eyl 2024
36İzleyin	CVE-2024-45846İstismar yok	An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integrationmindsdb · mindsdb · CWE-95 RCE	Yüksek8,8	—	%2,1	12 Eyl 2024
36İzleyin	CVE-2023-50731İstismar yok	MindsDB has arbitrary file write in file.pymindsdb · mindsdb · CWE-918 Kimlik doğrulamasız SSRF	Kritik9,1	—	%1,0	22 Ara 2023
35İzleyin	CVE-2022-23522İstismar yok	Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdbmindsdb · mindsdb · CWE-22 Yol geçişi	Yüksek8,8	—	%0,9	30 Mar 2023
35İzleyin	CVE-2024-45850İstismar yok	An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePointmindsdb · mindsdb · CWE-95 RCE	Yüksek8,8	—	%0,9	12 Eyl 2024
35İzleyin	CVE-2024-45851İstismar yok	An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePointmindsdb · mindsdb · CWE-95 RCE	Yüksek8,8	—	%0,9	12 Eyl 2024
35İzleyin	CVE-2024-45849İstismar yok	An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePointmindsdb · mindsdb · CWE-95 RCE	Yüksek8,8	—	%0,9	12 Eyl 2024
35İzleyin	CVE-2024-45847İstismar yok	An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integratimindsdb · mindsdb · CWE-95 RCE	Yüksek8,8	—	%0,9	12 Eyl 2024
35İzleyin	CVE-2024-45848İstismar yok	An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integrationmindsdb · mindsdb · CWE-95 RCE	Yüksek8,8	—	%0,9	12 Eyl 2024
35İzleyin	CVE-2024-45852İstismar yok	Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model tomindsdb · mindsdb · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%0,7	12 Eyl 2024
30İzleyin	CVE-2023-30620İstismar yok	Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdbmindsdb · mindsdb · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%1,0	21 Nis 2023
30İzleyin	CVE-2024-45853İstismar yok	Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhousmindsdb · mindsdb · CWE-502 RCE Deserializasyon	Yüksek7,5	—	%0,5	12 Eyl 2024
30İzleyin	CVE-2024-45854İstismar yok	Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhousmindsdb · mindsdb · CWE-502 RCE Deserializasyon	Yüksek7,5	—	%0,5	12 Eyl 2024
30İzleyin	CVE-2024-45855İstismar yok	Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhousmindsdb · mindsdb · CWE-502 RCE Deserializasyon	Yüksek7,5	—	%0,5	12 Eyl 2024
26İzleyin	CVE-2023-38699İstismar yok	MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issuemindsdb · mindsdb · CWE-311	Orta6,5	—	%0,3	4 Ağu 2023
24İzleyin	CVE-2024-3575İstismar yok	Cross-site Scripting (XSS) - Stored in mindsdb/mindsdbmindsdb · mindsdb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	15 Nis 2024
21İzleyin	CVE-2024-45856İstismar yok	A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whmindsdb · mindsdb · CWE-79 XSS	Orta5,4	—	%0,5	12 Eyl 2024
21İzleyin	CVE-2023-49796İstismar yok	MindsDB Arbitrary File Write vulnerabilitymindsdb · mindsdb · CWE-20 Kimlik doğrulamasız	Orta5,3	—	%0,5	11 Ara 2023
21İzleyin	CVE-2023-49795İstismar yok	MindsDB Server-Side Request Forgery vulnerabilitymindsdb · mindsdb · CWE-918 Kimlik doğrulamasız SSRF	Orta5,3	—	%0,4	11 Ara 2023
8İzleyin	CVE-2026-2531İstismar yok	MindsDB File Upload security.py clear_filename server-side request forgerymindsdb · mindsdb · CWE-918 SSRF	Düşük2,1	—	%0,2	16 Şub 2026

CVE-2025-68472
42Planlayın
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
KritikCVSS 9,1Kavram kanıtıEPSS %20
- Kimlik doğrulamasız
- Yol geçişi
mindsdb · mindsdb12 Oca 2026
CVE-2026-27483
38İzleyin
MindsDB has Path Traversal in /api/files Leading to Remote Code Execution
YüksekCVSS 8,8Kavram kanıtıEPSS %9
- RCE
- Yol geçişi
mindsdb · mindsdb24 Şub 2026
CVE-2024-24759
37İzleyin
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
KritikCVSS 9,1Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
- SSRF
mindsdb · mindsdb5 Eyl 2024
CVE-2024-45846
36İzleyin
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
mindsdb · mindsdb12 Eyl 2024
CVE-2023-50731
36İzleyin
MindsDB has arbitrary file write in file.py
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
mindsdb · mindsdb22 Ara 2023
CVE-2022-23522
35İzleyin
Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb
YüksekCVSS 8,8İstismar yokEPSS %1
- Yol geçişi
mindsdb · mindsdb30 Mar 2023
CVE-2024-45850
35İzleyin
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45851
35İzleyin
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45849
35İzleyin
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45847
35İzleyin
An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrati
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45848
35İzleyin
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45852
35İzleyin
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Deserializasyon
mindsdb · mindsdb12 Eyl 2024
CVE-2023-30620
30İzleyin
Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
mindsdb · mindsdb21 Nis 2023
CVE-2024-45853
30İzleyin
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous
YüksekCVSS 7,5İstismar yokEPSS %1
- RCE
- Deserializasyon
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45854
30İzleyin
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous
YüksekCVSS 7,5İstismar yokEPSS %1
- RCE
- Deserializasyon
mindsdb · mindsdb12 Eyl 2024
CVE-2024-45855
30İzleyin
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous
YüksekCVSS 7,5İstismar yokEPSS %1
- RCE
- Deserializasyon
mindsdb · mindsdb12 Eyl 2024
CVE-2023-38699
26İzleyin
MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue
OrtaCVSS 6,5İstismar yokEPSS %0
mindsdb · mindsdb4 Ağu 2023
CVE-2024-3575
24İzleyin
Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
mindsdb · mindsdb15 Nis 2024
CVE-2024-45856
21İzleyin
A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload wh
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
mindsdb · mindsdb12 Eyl 2024
CVE-2023-49796
21İzleyin
MindsDB Arbitrary File Write vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
mindsdb · mindsdb11 Ara 2023
CVE-2023-49795
21İzleyin
MindsDB Server-Side Request Forgery vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
mindsdb · mindsdb11 Ara 2023
CVE-2026-2531
8İzleyin
MindsDB File Upload security.py clear_filename server-side request forgery
DüşükCVSS 2,1İstismar yokEPSS %0
- SSRF
mindsdb · mindsdb16 Şub 2026